# Is it possible to enable httpNodeAuth only for Dashboard? not HTTP Node

**URL:** https://discourse.nodered.org/t/is-it-possible-to-enable-httpnodeauth-only-for-dashboard-not-http-node/71319
**Category:** General
**Tags:** node-red-dashboard
**Created:** [27 November 2022 14:01 UTC](https://discourse.nodered.org/t/is-it-possible-to-enable-httpnodeauth-only-for-dashboard-not-http-node/71319 "2022-11-27T14:01:30Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![m0rep0w3r](https://avatars.discourse-cdn.com/v4/letter/m/7ea924/32.png) [@m0rep0w3r](https://discourse.nodered.org/u/m0rep0w3r)
#### Post date: [27 November 2022 14:01 UTC](https://discourse.nodered.org/t/is-it-possible-to-enable-httpnodeauth-only-for-dashboard-not-http-node/71319/1 "2022-11-27T14:01:30Z")

</div>

Is it possible to enable httpNodeAuth only for Dashboard? not HTTP Node

I have enable `httpNodeAuth: {user:"user",pass:"$2a$08$zZWtXTja0fB1pzD4sHCMyOCMYz26dNbM6tl8sJgENOMcxWV9DN."}`

The dashboard is the only place where I need to use httpNodeAuth because in HTTP Node I need to use for API `http://user:pass@url.com` does not work in some cases

---

<div class="post-metadata">

### Author: ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)
#### Post date: [27 November 2022 15:46 UTC](https://discourse.nodered.org/t/is-it-possible-to-enable-httpnodeauth-only-for-dashboard-not-http-node/71319/2 "2022-11-27T15:46:55Z")

</div>

> [@m0rep0w3r](#):
>
> [http://user:pass@url.com](http://user:pass@url.com)

Should NEVER be used if there is any chance at all that it might go over the Internet. If you do, you may as well not have a user id and password.

The recommendation for more complex authentication and authorisation than node-red itself supports is to use a reverse proxy to do it instead. Something like NGINX or Caddy for example.

uibuilder also has the ability to use a different ExpressJS instance than the one used by the http and dashboard nodes and might be an alternative in some cases.

---

<div class="post-metadata">

### Author: ![dceejay](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/dceejay/32/38_2.png) [@dceejay](https://discourse.nodered.org/u/dceejay)
#### Post date: [27 November 2022 18:54 UTC](https://discourse.nodered.org/t/is-it-possible-to-enable-httpnodeauth-only-for-dashboard-not-http-node/71319/3 "2022-11-27T18:54:14Z")

</div>

Short answer is no, they both use the same authentication method, so if it’s enabled for dashboard it is also enabled for general http

---

<div class="post-metadata">

### Author: ![m0rep0w3r](https://avatars.discourse-cdn.com/v4/letter/m/7ea924/32.png) [@m0rep0w3r](https://discourse.nodered.org/u/m0rep0w3r)
#### Post date: [28 November 2022 01:46 UTC](https://discourse.nodered.org/t/is-it-possible-to-enable-httpnodeauth-only-for-dashboard-not-http-node/71319/4 "2022-11-28T01:46:48Z")

</div>

thank you

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)
#### Post date: [12 December 2022 01:46 UTC](https://discourse.nodered.org/t/is-it-possible-to-enable-httpnodeauth-only-for-dashboard-not-http-node/71319/5 "2022-12-12T01:46:53Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.